Information Disclosure
Discription
github.com/usememos/memos is vulnerable to information disclosure. A remote authenticated attacker is able to gain access to confidential user details via the `api/status` endpoint, which returns email addresses to unauthorized users.Read More
References
Back to Main